Summary
The user API should be restricted via GitHub, GitLab or LFID authentication.
Background
Currently the API doesn't require authentication, which creates a vulnerability.
Expected behavior
If an user attempts to call the user API using the userid, it shouldn't be accessible unless authenticated.
Summary
The user API should be restricted via GitHub, GitLab or LFID authentication.
Background
Currently the API doesn't require authentication, which creates a vulnerability.
Expected behavior
If an user attempts to call the user API using the userid, it shouldn't be accessible unless authenticated.